SwiftNIO HTTP/2 1.45.0: Missing CR/LF/NUL validation in header values (CVE-2026-64785)

Note: 1.45.0 has been available since 2026-07-22; if you have already updated, no action is needed. Users of SwiftNIO HTTP/2 should update to 1.45.0 as soon as practically possible, which addresses the following security issue: Inbound HEADERS frames were not fully validated, letting CR, LF, NUL and SP characters in regular header field values and in pseudo-header values such as :path reach an HTTP/1.1 backend through HTTP2ToHTTP1Codec or HTTP2FramePayloadToHTTP1Codec, enabling HTTP request ...